Hampton Florist Privacy Policy: GDPR Compliance and Your Rights

Introduction

This Privacy Policy sets out how Hampton Florist ("we" or "us") collects, uses, stores, and protects the personal data of its customers in Hampton and surrounding districts. This policy applies to all individuals placing orders with Hampton Florist either online, by phone, or in person. We are committed to upholding the principles of the General Data Protection Regulation (GDPR) and ensuring your personal data is handled lawfully, transparently, and securely.

What Data We Collect

To provide our services and ensure the efficient fulfillment of your orders, Hampton Florist collects and processes certain types of personal data, which may include:

• Identification Data: Your full name, title, and, if relevant, details of gift recipients.
• Contact Information: Billing and delivery addresses, telephone numbers, and other contact details supplied when placing an order.
• Order Details: Information about the floral products you order, delivery instructions, preferences, and notes or messages to recipients.
• Payment Data: Transaction details, purchase amounts, and payment method used. Hampton Florist does not store full payment card details; these are handled securely by our payment processors.
• Website Usage Data: When you use our website, we may collect technical data such as your IP address, browser type, device information, and browsing activities through cookies or similar technologies (subject to your consent, where required).

Lawful Basis for Processing Personal Data

Hampton Florist only processes your personal data when we have a valid legal basis under GDPR. The primary bases for our use of your data include:

• Contractual Necessity: To process and deliver your orders, communicate with you, and provide customer support.
• Legitimate Interests: For business administration, product and service improvement, fraud detection, and marketing activities that are relevant to existing customers.
• Legal Obligations: To comply with applicable laws, such as tax and accounting regulations.
• Consent: For specific optional uses, such as sending marketing communications to new customers or collecting data via website cookies for analytics, we will seek your explicit consent.

Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, including:

• Completing your order and delivery.
• Meeting our legal and regulatory obligations.
• Managing any queries, complaints, or disputes.

Typically, order information and contact data (excluding payment card details, which are not stored) are retained for up to seven years to comply with our legal requirements. After this period, data is securely deleted or anonymized unless further retention is required by law.

Data Processors and Third Parties

To deliver your flowers and manage our services, Hampton Florist may share your data with carefully selected third-party service providers ("processors") who act only on our instructions and help perform activities such as:

• Processing payments securely.
• Arranging deliveries.
• Providing website hosting and IT services.

All processors are contractually obliged to keep your data secure and confidential, and not to use it for their own purposes. No data is sold to third parties. If we are legally required (for example, by law enforcement), we may disclose your data, but only within the framework provided by GDPR and relevant legislation.

International Transfers

Hampton Florist stores and processes personal data primarily within the United Kingdom and European Economic Area (EEA). If your data needs to be transferred outside this region (for example, if a third-party IT provider is based overseas), we ensure such transfers are protected by adequate safeguards in accordance with GDPR requirements.

Security Measures

We take the security of your personal data seriously, implementing a variety of technical and organizational measures to prevent loss, misuse, unauthorized access, disclosure, or alteration. These include secure data storage, access controls, staff training, and protocols for handling a personal data breach, should one occur.

Your Rights Under GDPR

As a data subject, you have a range of rights concerning how we handle your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any incomplete or inaccurate data.
• Right to Erasure: You can request the deletion of your data when it is no longer required, or if you withdraw your consent (where consent is the legal basis), provided we have no other lawful reason to retain it.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You can request your data in a format that allows you to transfer it to another organization.
• Right to Object: You may object to processing based on legitimate interests or direct marketing, after which we will no longer process your data unless we have compelling legitimate grounds.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw this at any time.

To exercise your rights, please contact us using the details specified in our customer communication channels or in-store. For certain requests, we may need to verify your identity before responding.

Policy Updates and Contacting Us

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. If material changes are made, we will take reasonable steps to inform you, in accordance with the applicable law. We encourage you to review this policy periodically. For privacy-related queries or complaints, please contact us using the standard channels as detailed on our website or in our shop.

Applicability of This Policy

This Privacy Policy applies to all customers placing orders with Hampton Florist from Hampton and the neighboring districts. By placing an order, you acknowledge that you have read and understood the terms of this Privacy Policy.